Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: AiRrymDATCzX5S6pjztOKo35ngCe6+HmEmQWP2QJWIw=
Subject key identifier: BC:BA:76:E2:C8:4F:13:90:C1:1C:EC:A6:57:81:A0:9E:AA:21:A2:EC
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019EC337A8690A5DDCEB47CD9E839C2D88E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0C7E
Signing time: Sat 13 Jun 2026 23:01:05 +0000
Manifest this update: Sat 13 Jun 2026 23:01:05 +0000
Manifest next update: Sun 14 Jun 2026 23:01:05 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: V0iX0vngDPL40jHIT3BIdu93HQGMmlWyIn1uZl6R9Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:a8:69:0a:5d:dc:eb:47:cd:9e:83:9c:2d:88:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 13 23:01:05 2026 GMT
Not After : Jun 14 23:01:05 2026 GMT
Subject: CN=bcba76e2c84f1390c11ceca65781a09eaa21a2ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:0a:13:ef:3f:5f:d5:bf:bb:e3:c8:3b:89:
90:14:b4:69:10:2d:0d:a0:35:ba:c8:eb:2b:9f:1f:
13:a9:d8:de:20:cd:64:38:64:1f:cf:e4:5a:e4:b4:
4f:c0:b8:1b:62:d6:4f:15:e7:76:5a:8c:63:ff:97:
f3:dc:08:3d:77:ec:57:ce:31:bc:95:22:d2:54:89:
85:b8:83:b6:a6:ac:64:ae:1e:21:22:db:41:ab:c0:
90:fe:55:51:c3:89:59:e2:31:83:e0:09:a4:56:95:
ea:27:f3:d6:ba:15:69:ec:c1:6f:d0:87:72:34:de:
49:2e:99:f9:fb:4a:20:aa:11:0a:39:f5:3a:e4:a1:
8c:b3:1d:1b:9c:0a:e6:0d:e4:51:8a:84:ec:56:a4:
b7:72:b3:f8:39:a3:2c:ab:fa:6f:5a:a2:e9:28:e3:
b1:0e:13:b6:01:8b:64:92:4d:77:2f:db:35:e5:89:
e8:5d:fd:bf:92:b1:d0:ad:77:ac:fc:52:ee:82:0a:
00:e6:ab:01:a9:b2:ae:ee:43:a7:be:55:4e:49:52:
6c:7c:ac:a1:82:21:93:41:83:eb:72:42:7e:bd:ab:
03:af:58:10:a1:74:4a:c6:14:d8:78:8c:fe:58:64:
52:56:bb:da:c5:69:02:90:da:83:cb:49:23:0b:1b:
41:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BA:76:E2:C8:4F:13:90:C1:1C:EC:A6:57:81:A0:9E:AA:21:A2:EC
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ee:9b:41:6f:77:34:8b:da:7e:2a:3b:ca:a3:33:89:4a:a5:
8e:5b:b3:c4:8d:7e:cf:e6:57:f1:6b:d8:26:b2:95:b6:ff:b2:
45:ba:d0:17:e5:15:7e:24:6a:05:d3:1a:31:9b:24:96:a1:df:
d1:d5:58:bd:75:03:ed:77:de:99:42:9e:6e:40:89:38:93:5b:
a2:07:fa:3b:a6:77:cd:5d:d9:c6:3d:e3:1c:a6:4e:87:0f:6f:
29:17:fd:0e:6d:59:41:78:6d:95:e8:03:cc:e1:cb:12:76:c8:
16:62:20:79:43:48:8a:76:cc:b3:2a:0b:c6:0c:fa:47:15:b9:
35:a6:5a:49:23:e5:c4:ee:3e:63:03:c1:73:e3:fa:8f:d2:a6:
a5:b0:d5:5d:aa:ee:e1:98:0d:11:97:ef:2c:bb:b5:e2:90:53:
52:f6:d6:18:6f:23:e9:00:5f:3f:e8:e5:2b:b5:35:1b:99:43:
56:73:10:a8:7f:66:41:fc:1b:63:18:ed:b2:67:9b:09:f8:de:
f3:39:6e:61:6f:18:64:5b:62:42:55:78:90:56:a2:25:17:3a:
3d:e7:e9:07:54:db:bd:18:36:dc:d6:b0:e2:5e:e7:38:ea:6c:
e5:2a:a1:97:05:6a:7e:f1:29:92:fe:bf:c0:e3:e3:14:55:0a:
99:73:fa:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DN6hpCl3c60fNnoOcLYjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNGQ2MzExNjZlOGVlZGU3ODcyZWFkOGFiOWE4MWFkYzg3
N2Q0ZDEwHhcNMjYwNjEzMjMwMTA1WhcNMjYwNjE0MjMwMTA1WjAzMTEwLwYDVQQD
EyhiY2JhNzZlMmM4NGYxMzkwYzExY2VjYTY1NzgxYTA5ZWFhMjFhMmVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+wKE+8/X9W/u+PIO4mQFLRpEC0N
oDW6yOsrnx8TqdjeIM1kOGQfz+Ra5LRPwLgbYtZPFed2Woxj/5fz3Ag9d+xXzjG8
lSLSVImFuIO2pqxkrh4hIttBq8CQ/lVRw4lZ4jGD4AmkVpXqJ/PWuhVp7MFv0Idy
NN5JLpn5+0ogqhEKOfU65KGMsx0bnArmDeRRioTsVqS3crP4OaMsq/pvWqLpKOOx
DhO2AYtkkk13L9s15YnoXf2/krHQrXes/FLuggoA5qsBqbKu7kOnvlVOSVJsfKyh
giGTQYPrckJ+vasDr1gQoXRKxhTYeIz+WGRSVrvaxWkCkNqDy0kjCxtBdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLy6duLITxOQwRzspleBoJ6qIaLsMB8GA1UdIwQY
MBaAFF1NYxFm6O7eeHLq2Kuaga3Id9TRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTct
ZmEzNmZjM2I3Mzc2LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS80M2I3OGMtNDUzOS00MTEyLWI3NTctZmEzNmZjM2I3Mzc2
LzEvWFUxakVXYm83dDU0Y3VyWXE1cUJyY2gzMU5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPO6bQW93
NIvafio7yqMziUqljluzxI1+z+ZX8WvYJrKVtv+yRbrQF+UVfiRqBdMaMZsklqHf
0dVYvXUD7XfemUKebkCJOJNbogf6O6Z3zV3Zxj3jHKZOhw9vKRf9Dm1ZQXhtlegD
zOHLEnbIFmIgeUNIinbMsyoLxgz6RxW5NaZaSSPlxO4+YwPBc+P6j9KmpbDVXaru
4ZgNEZfvLLu14pBTUvbWGG8j6QBfP+jlK7U1G5lDVnMQqH9mQfwbYxjtsmebCfje
8zluYW8YZFtiQlV4kFaiJRc6PefpB1TbvRg23Naw4l7nOOps5SqhlwVqfvEpkv6/
wOPjFFUKmXP66g==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:36:07 2026 by rpki-client